HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.30
System: Linux iZj6c1151k3ad370bosnmsZ 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64
User: root (0)
PHP: 7.4.30
Disabled: NONE
Upload Files
File: /var/www/html/phpmyfaq/admin/record.delatt.php
<?php

/**
 * Deletes an attachment.
 *
 * This Source Code Form is subject to the terms of the Mozilla Public License,
 * v. 2.0. If a copy of the MPL was not distributed with this file, You can
 * obtain one at http://mozilla.org/MPL/2.0/.
 *
 * @package phpMyFAQ
 * @author Thorsten Rinne <thorsten@phpmyfaq.de>
 * @copyright 2003-2022 phpMyFAQ Team
 * @license http://www.mozilla.org/MPL/2.0/ Mozilla Public License Version 2.0
 * @link https://www.phpmyfaq.de
 * @since 2003-02-24
 */

use phpMyFAQ\Attachment\AttachmentException;
use phpMyFAQ\Filter;
use phpMyFAQ\Attachment\AttachmentFactory;

if (!defined('IS_VALID_PHPMYFAQ')) {
    http_response_code(400);
    exit();
}

printf(
    '<header><h2 class="page-header"><i aria-hidden="true" class="fa fa-pencil"></i> %s</h2></header>',
    $PMF_LANG['ad_entry_aor']
);

if ($user->perm->hasPermission($user->getUserId(), 'delattachment')) {
    $recordId = Filter::filterInput(INPUT_GET, 'record_id', FILTER_VALIDATE_INT);
    $recordLang = Filter::filterInput(INPUT_GET, 'lang', FILTER_UNSAFE_RAW);
    $id = Filter::filterInput(INPUT_GET, 'id', FILTER_VALIDATE_INT);

    try {
        $att = AttachmentFactory::create($id);
        if ($att && $att->delete()) {
            printf('<p class="alert alert-success">%s</p>', $PMF_LANG['ad_att_delsuc']);
        }
    } catch (AttachmentException $e) {
        printf('<p class="alert alert-danger">%s</p>', $PMF_LANG['ad_att_delfail']);
    }

    printf(
        '<p><a href="?action=editentry&amp;id=%d&amp;lang=%s">%s</a></p>',
        $recordId,
        $recordLang,
        $PMF_LANG['ad_entry_back']
    );
} else {
    print $PMF_LANG['err_NotAuth'];
}